Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
File:                     3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa (raw, json)
Hash identifier:          8UB6DjWxaSR6S5q/oMzjffExylDzjL2YkocEgCkH0qM=
Subject key identifier:   C3:01:B4:9D:39:1D:4F:6F:EB:7F:93:04:D5:94:3F:A4:D6:B2:74:37
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F432858474F4B6BDBE7A75862B8347340
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     12189
IP address blocks:        2607:6004:100::/40 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:6b:db:e7:a7:58:62:b8:34:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=8263d1e9-cae3-49bd-b720-fc3a7986e133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:74:79:85:13:f1:4c:32:ee:22:6a:ae:0e:
                    e6:af:4a:07:2a:55:74:1a:f7:4e:18:55:70:55:f5:
                    39:5a:11:be:6c:c6:bc:aa:8f:21:18:6b:cf:36:cc:
                    a1:68:97:ed:74:7f:4c:58:73:08:f9:9f:7c:90:58:
                    ad:f2:9d:66:c7:b8:49:87:e8:35:8d:50:1d:c8:0c:
                    9c:63:51:de:f7:d4:44:a5:19:93:15:4e:d4:09:47:
                    d5:3f:48:38:18:f9:f6:da:25:3d:63:32:5f:21:f4:
                    92:e0:c3:1d:75:ab:9d:6f:e6:79:c8:7f:00:6d:cb:
                    75:ab:be:1e:bc:e7:24:d1:20:c7:46:80:b3:99:aa:
                    96:b4:59:92:a2:26:df:ae:4a:33:36:89:9e:14:7f:
                    48:57:87:2b:df:cb:f8:0b:96:f6:e1:9a:32:4c:8c:
                    6b:90:49:5d:91:8f:f8:50:c2:18:04:08:9f:dd:e3:
                    de:c7:42:f1:ae:80:de:b3:0e:92:68:aa:bc:70:1e:
                    06:b2:cf:5d:8f:54:bf:c9:5d:fe:8b:a1:bf:66:fc:
                    a4:4f:67:87:70:fb:bb:a7:96:7c:c1:8a:58:fa:5f:
                    a6:ef:dd:70:78:a1:85:1a:0c:15:b3:7e:36:0c:dc:
                    aa:a2:bf:c1:fb:7a:60:e6:40:c4:e1:2f:64:04:8e:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:01:B4:9D:39:1D:4F:6F:EB:7F:93:04:D5:94:3F:A4:D6:B2:74:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/3f57fca9-06dd-3728-9f37-d97b6a30f7ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6004:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b4:49:7a:b1:6b:83:41:1f:cb:9e:c7:57:d6:21:d4:f7:55:
         aa:07:51:12:78:47:22:e1:27:67:51:d0:ff:1a:45:86:18:af:
         2a:76:93:d1:89:2d:9d:0b:50:02:c4:98:43:c9:fc:69:8e:0c:
         40:25:b9:1b:c0:e0:e7:40:ba:16:e4:2f:ff:8f:14:0a:d2:de:
         50:b1:aa:50:05:df:41:c4:21:2c:ce:98:81:89:55:c8:74:c5:
         23:4e:36:b1:d0:e0:83:4d:77:f1:8e:1f:8e:bc:aa:39:f5:24:
         56:bc:8a:5a:24:6d:3b:a6:41:82:28:59:6a:3d:e4:31:1e:1e:
         85:91:c7:02:8d:69:f2:1c:f0:84:9a:c7:e1:75:94:a9:fa:96:
         24:f1:1e:ee:83:92:90:1a:1c:ee:ec:4d:b5:56:31:9c:cd:c8:
         1f:a5:48:1e:9c:9d:18:81:4b:72:9f:5c:ae:f5:f0:a4:d5:d9:
         f2:33:75:ad:73:31:7c:13:e9:d0:86:68:02:70:89:3d:a2:bb:
         c4:3e:1e:fc:af:ef:2a:75:ea:8c:91:99:6d:85:5c:b7:db:5c:
         6f:f1:9f:05:14:71:09:57:7f:a7:1b:11:3c:4e:92:f9:5f:93:
         3f:19:25:8e:fa:9a:ba:a3:b1:1a:ba:15:2a:a6:9e:02:cd:99:
         29:99:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:08 2024 by rpki-client on console-ams.rpki-client.org